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DETAILED ACTION 



Claim Rejections - 35 (JSC § 103 



1. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject 
matter sought to be patented and the prior art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

2. Claims 1-5, 11-19, 20-21 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Franklin et al U.S. Patent No. 5883810. 

As per claims 1, 3, Franklin et al discloses an online commerce card is issued 
electronically to a customer by an issuing institution, such as a bank or third party 
certifying authority. The issued card is assigned a permanent customer account number 
that is maintained on behalf of the customer by the issuing institution. The customer 
account number is not given to the customer to remove the risk of that number being 
lost or stolen. When the customer desires to conduct an online transaction, the 
customer sends a request to the issuing institution to issue a transaction number for a 
single transaction. The issuing institution generates a temporary transaction number 
and associates it with the permanent account number in a data record. The customer 
receives the transaction number and submits that number to the merchant as a proxy 
for the customer account number during the transaction. The transaction number looks 
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like a real card number (i.e., it has the same format and number of digits as a regular 
credit card). To the merchant, the transaction number is treated the same as any 
regular credit card number. The merchant handles the proxy transaction number 
according to traditional protocols, including seeking authorization from the issuing 
institution to honor the card number. During the authorization phase, the issuing 
institution recognizes the number as a transaction number for an online commerce card. 
The issuing institution references the customer account number associated with the 
online commerce card, using the transaction number as an index to the appropriate 
data record, and processes the authorization request using the card's true customer 
account number. In this manner, the issuing institution can use its existing processing 
system to check account information, spending limits, and so forth. Once the 
authorization request is processed, the issuing institution once again exchanges the 
card's transaction number for the card's customer account number and sends an 
authorization reply back to the merchant under the transaction number. (See column 2 
lines 5-40 of Franklin et al). Franklin et al also discloses that a PIN and software stored 
on a floppy disk and mailed to the customer using conventional postal carries. (See 
column 6 lines 50-65 of Franklin). Franklin et al also discloses the customer receives a 
PIN mailer three to ten days following application submittal. Upon receiving the PIN, the 
customer invokes the registration module and prepares a "request for a certificate" from 
the issuing bank. As part of creating the request for certificate, the customer is asked to 
enter a public key (or one can be provided automatically by the customer computer). 
The registration wizard generates an associated private key using its own resources, or 
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by calling a cryptographic services library resident on the customer computer. The 
cryptographic services perform such tasks as encryption, decryption, digital signing, 
authentication, and hash computations (See column 7 lines 5-15 of Franklin et al). 
Franklin does not explicitly teach limited use credit card number that is not yet activated. 
It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to that the teachings of Franklin et al can be applied to accomplish the 
teachings of the claimed invention and in order for a credit card that was been issued to 
be activated. The benefit would have been to validate the credit card number by an 
issuing authority upon a customer attempting to perform a transaction using the credit 
card number. 

As per claim 2, Franklin et al discloses for added security, the transaction 
number can be linked to extra transaction information to ensure that the number is only 
used for one specific transaction. For instance, the issuing institution might tie the 
transaction number to a specific purchase amount and a particular merchant ID. The 
issuing institution might further impose a short expiration term on the transaction 
number so that the number becomes invalid after the expiration term lapses. (See 
column 2 lines 50-55 of Franklin et al). Franklin et al does explicitly teach specific group 
of merchants. It would have been obvious to one of ordinary skill in the art at the time 
the invention was made to that the teachings of Franklin et al can be applied in order 
use a specific group of merchants, in order to achieve the claimed invention. The benefit 
would have been to have a credit card number with limitations set within the card by the 
issuing authority. 
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As per claim 4, Franklin et al discloses that a PIN and software stored on a 
floppy disk and mailed to the customer using conventional postal carries. (See column 6 
lines 50-65 of Franklin). Franklin et al also discloses the customer receives a PIN mailer 
three to ten days following application submittal. Upon receiving the PIN, the customer 
invokes the registration module and prepares a "request for a certificate" from the 
issuing bank. As part of creating the request for certificate, the customer is asked to 
enter a public key (or one can be provided automatically by the customer computer). 
The registration wizard generates an associated private key using its own resources, or 
by calling a cryptographic services library resident on the customer computer. The 
cryptographic services perform such tasks as encryption, decryption, digital signing, 
authentication, and hash computations. (See column 7 lines 5-30 of Franklin et al). 
Franklin et al also discloses for added security, the transaction number can be linked to 
extra transaction information to ensure that the number is only used for one specific 
transaction. For instance, the issuing institution might tie the transaction number to a 
specific purchase amount and a particular merchant ID. The issuing institution might 
further impose a short expiration term on the transaction number so that the number 
becomes invalid after the expiration term lapses. (See column 2 lines 50-55 of Franklin 
et al). Franklin et al does not explicitly teach requesting validation of a limited use credit 
card for a merchant as identified by a merchant identification number. It would have 
been obvious to one of ordinary skill in the art at the time the invention was made to that 
the teachings of Franklin et al can be applied in order to validate a limited use credit 
card for a merchant as identified by a merchant identification number. The benefit would 
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have been to validate a credit card number and execute the limited use function of the 
card. 

As per claim 5, Franklin et al discloses during the payment authorization phase, 
the merchant submits the transaction number over the conventional payment network to 
the issuing bank for approval. The issuing bank identifies the number as a transaction 
number, as opposed to a real customer account number. The issuing bank uses the 
transaction number to retrieve the data record linking the transaction number to a 
customer account number. The issuing bank then swaps the customer account number 
for the transaction number and processes the authorization request using its 
conventional processing system. After the processing, the issuing bank substitutes the 
transaction number back for the customer account number and returns the authorization 
reply to the merchant under the transaction number. In this manner, only the issuing 
bank is aware that the transaction number is a proxy for the customer account number. 
The merchant need not be aware that the transaction number is not a true customer 
account number, but simply handles the number as it would any other card number. 
(See column 5 of Franklin et al). Franklin also discloses the issuing institution can use 
the existing processing system to check account information spending limits, and so 
forth. (See column 2 lines 30-40 of Franklin et al). Franklin also discloses the issuing 
institution might further impose a short expiration term on the transaction number so 
that the number becomes invalid after the expiration term lapses. (See column 2 line 50 
of Franklin et al). Franklin does not explicitly teach deactivating the limited use credit 
card number by the card issuer when a triggered condition is present. It would have 
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been obvious to one of ordinary skill in the art at the time the invention was made that 
the teachings of Franklin et al can be applied in order to deactivate the limited use credit 
card number by the card issuer when a triggered condition is present. The benefit would 
have been to tender the credit card number to a merchant to pay for merchandise 
further deactivating the limited use credit card when the transaction is completed. 

As per claims 11-12, Franklin discloses the issuing institution might further 
impose a short expiration term on the transaction number so that the number becomes 
invalid after the expiration term lapses. (See column 2 lines 30-50 of Franklin et al). It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the teachings of Franklin et al in order to for a short expiration term or 
spending limits placed on the transaction number which will trigger an invalid card. The 
benefit would have been to enforce a restriction associated with the transaction number. 

As per claim 15, It would have obvious to one of ordinary skill in the art at the 
time the invention was made that declining authorization for credit card transaction is a 
common function in the art. The benefit would have been to authenticate a transaction 
before it is given approval. 

As per claim 13-14, Franklin et al discloses an online commerce card is issued 
electronically to a customer by an issuing institution, such as a bank or third party 
certifying authority. The issued card is assigned a permanent customer account number 
that is maintained on behalf of the customer by the issuing institution. The customer 
account number is not given to the customer to remove the risk of that number being 
lost or stolen. When the customer desires to conduct an online transaction, the 
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customer sends a request to the issuing institution to issue a transaction number for a 
single transaction. The issuing institution generates a temporary transaction number 
and associates it with the permanent account number in a data record. The customer 
receives the transaction number and submits that number to the merchant as a proxy 
for the customer account number during the transaction. The transaction number looks 
like a real card number (i.e., it has the same format and number of digits as a regular 
credit card). To the merchant, the transaction number is treated the same as any 
regular credit card number. The merchant handles the proxy transaction number 
according to traditional protocols, including seeking authorization from the issuing 
institution to honor the card number. During the authorization phase the issuing 
institution recognizes the number as a transaction number for an online commerce card. 
The issuing institution references the customer account number associated with the 
online commerce card, using the transaction number as an index to the appropriate 
data record, and processes the authorization request using the card's true customer 
account number. In this manner, the issuing institution can use its existing processing 
system to check account information, spending limits, and so forth. Once the 
authorization request is processed, the issuing institution once again exchanges the 
card's transaction number for the card's customer account number and sends an 
authorization reply back to the merchant under the transaction number. (See column 2 
lines 5-40 of Franklin et al). Franklin et al does not explicitly teach limited use 
properties of revalidated limited use credit card number are different from the limited 
use properties of the validated limited use credit card number this is taught by Masuda. 
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Masuda discloses the credit card and/or the first system may have a limit amount 
column for recording a limit amount of money, and the first system may further comprise 
means for updating the limit amount of money recorded in the limit amount column as 
the credit card is used. Each of the methods may further comprise the step of 
determining whether the credit card can be used or not based on resultant data 
produced by comparison between the limit amount of money recorded in the limit 
amount column and an amount to money proposed to pay with the credit card. It would 
have been obvious to one of ordinary skill in the art at the time that invention was made 
to modify the teachings of Franklin et al to include Masuda in order for the limited use 
properties of revalidated limited use credit card number to be different from the limited 
use properties of the validated limited use credit card number. The benefit would have 
been to reactivate or update the credit card with a new value. 

As per claims 16, Franklin et al discloses an online commerce card is issued 
electronically to a customer by an issuing institution, such as a bank or third party 
certifying authority. The issued card is assigned a permanent customer account number 
that is maintained on behalf of the customer by the issuing institution. The customer 
account number is not given to the customer to remove the risk of that number being 
lost or stolen. When the customer desires to conduct an online transaction, the 
customer sends a request to the issuing institution to issue a transaction number for a 
single transaction. The issuing institution generates a temporary transaction number 
and associates it with the permanent account number in a data record. The customer 
receives the transaction number and submits that number to the merchant as a proxy 
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for the customer account number during the transaction. The transaction number looks 
like a real card number (i.e., it has the same format and number of digits as a regular 
credit card). To the merchant, the transaction number is treated the same as any 
regular credit card number. The merchant handles the proxy transaction number 
according to traditional protocols, including seeking authorization from the issuing 
institution to honor the card number. During the authorization phase, the issuing 
institution recognizes the number as a transaction number for an online 
commerce card. The issuing institution references the customer account number 
associated with the online commerce card, using the transaction number as an index to 
the appropriate data record, and processes the authorization request using the card's 
true customer account number. In this manner, the issuing institution can use its 
existing processing system to check account information, spending limits, and so forth. 
Once the authorization request is processed, the issuing institution once again 
exchanges the card's transaction number for the card's customer account number and 
sends an authorization reply back to the merchant under the transaction number. (See 
column 2 lines 5-40 of Franklin et al). Franklin et al also discloses that a PIN and 
software stored on a floppy disk and mailed to the customer using conventional postal 
carries.(See column 6 lines 50-65 of Franklin). Franklin et al also discloses the 
customer receives a PIN mailer three to ten days following application submittal. Upon 
receiving the PIN, the customer invokes the registration module 56 and prepares a 
"request for a certificate" from the issuing bank. As part of creating the request for 
certificate, the customer is asked to enter a public key (or one can be provided 
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automatically by the customer computer). The registration wizard 56 generates an 
associated private key using its own resources, or by calling a cryptographic services 
library resident on the customer computer. The cryptographic services perform such 
tasks as encryption, decryption, digital signing, authentication, and hash computations 
(See column 7 lines 5-15 of Franklin et al). Franklin does not explicitly teach limited use 
credit card number that is not yet activated. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to note that the teachings of 
Franklin et al can be applied to accomplish the teachings of the claimed invention and in 
order for a credit card that was been issued to be activated. The benefit would have 
been to validate the credit card number by an issuing authority upon a customer 
attempting to perform a transaction using the credit card number. 

As per claim 17, Franklin discloses the issuing institution might further impose a 
short expiration term on the transaction number so that the number becomes invalid 
after the expiration term lapses. (See column 2 lines 30-50 of Franklin et al). It would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
to modify the teachings of Franklin et al in order to for a short expiration term or 
spending limits placed on the transaction number which will trigger an invalid card. The 
benefit would have been to enforce a restriction associated with the transaction 
number. 

As per claims 18, 20-21, Franklin et al discloses an online commerce card is 
issued electronically to a customer by an issuing institution, such as a bank or third 
party certifying authority. The issued card is assigned a permanent customer account 
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number that is maintained on behalf of the customer by the issuing institution. The 
customer account number is not given to the customer to remove the risk of that 
number being lost or stolen. When the customer desires to conduct an online 
transaction, the customer sends a request to the issuing institution to issue a 
transaction number for a single transaction. The issuing institution generates a 
temporary transaction number and associates it with the permanent account number in 
a data record. The customer receives the transaction number and submits that number 
to the merchant as a proxy for the customer account number during the transaction. The 
transaction number looks like a real card number (i.e., it has the same format and 
number of digits as a regular credit card). To the merchant, the transaction number is 
treated the same as any regular credit card number. The merchant handles the proxy 
transaction number according to traditional protocols, including seeking authorization 
from the issuing institution to honor the card number. During the authorization phase, 
the issuing institution recognizes the number as a transaction number for an online 
commerce card. The issuing institution references the customer account number 
associated with the online commerce card, using the transaction number as an index to 
the appropriate data record, and processes the authorization request using the card's 
true customer account number. In this manner, the issuing institution can use its 
existing processing system to check account information, spending limits, and so forth. 
Once the authorization request is processed, the issuing institution once again 
exchanges the card's transaction number for the card's customer account number and 
sends an authorization reply back to the merchant under the transaction number. (See 
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column 2 lines 5-40 of Franklin et al). Franklin et al also discloses that a PIN and 
software stored on a floppy disk and mailed to the customer using conventional postal 
carries. (See column 6 lines 50-65 of Franklin). Franklin et al also discloses the 
customer receives a PIN mailer three to ten days following application submittal. Upon 
receiving the PIN, the customer invokes the registration module and prepares a 
"request for a certificate" from the issuing bank. As part of creating the request for 
certificate, the customer is asked to enter a public key (or one can be provided 
automatically by the customer computer). The registration wizard generates an 
associated private key using its own resources, or by calling a cryptographic services 
library resident on the customer computer. The cryptographic services perform such 
tasks as encryption, decryption, digital signing, authentication, and hash computations 
(See column 7 lines 5-15 of Franklin et al). Franklin does not explicitly teach limited use 
credit card number that is not yet activated. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to note that the teachings of 
Franklin et al can be applied to accomplish the teachings of the claimed invention and in 
order for a credit card that was been issued to be activated. The benefit would have 
been to validate the credit card number by an issuing authority upon a customer 
attempting to perform a transaction using the credit card number. 

As per claim 19, Franklin discloses the issuing institution might further impose a 
short expiration term on the transaction number so that the number becomes invalid 
after the expiration term lapses. (See column 2 lines 30-50 of Franklin et al). It would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
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to apply the teachings of Franklin et al in order to for a short expiration term or spending 

limits placed on the transaction number which will trigger an invalid card. The benefit 

would have been to enforce a restriction associated with the transaction number. 

3. Claims 6-7, 8-10, are rejected under 35 U.S.C. 103(a) as being unpatentable over Franklin et 
al U.S. Patent No. 5883810 in view of Hidehiro Masuda U.S. Patent No 5,777,306. 

As per claim 6-7, Franklin discloses the issuing institution can use the existing 

processing system to check account information spending limits, and so forth. (See 

column 2 lines 30-40 of Franklin et al). Franklin also discloses the issuing institution 

might further impose a short expiration term on the transaction number so that the 

number becomes invalid after the expiration term lapses. (See column 2 line 50 of 

Franklin et al). Franklin does not explicitly teach communicating with the card issuer to 

reactivate the limited use credit card number to be used in one or more additional 

transactions subsequent to the deactivating step or revalidating the use credit card 

number with associated limited use properties this is taught by Masuda. Masuda 

discloses the credit card and/or the first system may have a limit amount column for 

recording a limit amount of money, and the first system may further comprise means for 

updating the limit amount of money recorded in the limit amount column as the credit 

card is used. Each of the methods may further comprise the step of determining 

whether the credit card can be used or not based on resultant data produced by 

comparison between the limit amount of money recorded in the limit amount column 

and an amount to money proposed to pay with the credit card. It would have been 

obvious to one of ordinary skill in the art at the time that invention was made to modify 
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the teachings of Franklin et al to include Masuda in order to communicate with the card 
issuer to reactivate the limited use credit card number to be used in one or more 
additional transactions subsequent to the deactivating. The benefit would have been to 
reactivate or update the credit card with a new value. 

As per claim 8-10, Franklin et al discloses an online commerce card is issued 
electronically to a customer by an issuing institution, such as a bank or third party 
certifying authority. The issued card is assigned a permanent customer account number 
that is maintained on behalf of the customer by the issuing institution. The customer 
account number is not given to the customer to remove the risk of that number being 
lost or stolen. When the customer desires to conduct an online transaction, the 
customer sends a request to the issuing institution to issue a transaction number for a 
single transaction. The issuing institution generates a temporary transaction number 
and associates it with the permanent account number in a data record. The customer 
receives the transaction number and submits that number to the merchant as a proxy 
for the customer account number during the transaction. The transaction number looks 
like a real card number (i.e., it has the same format and number of digits as a regular 
credit card). To the merchant, the transaction number is treated the same as any 
regular credit card number. The merchant handles the proxy transaction number 
according to traditional protocols, including seeking authorization from the issuing 
institution to honor the card number. During the authorization phase the issuing 
institution recognizes the number as a transaction number for an online commerce card. 
The issuing institution references the customer account number associated with the 



Application/Control Number: 09/506,830 Page 16 

Art Unit: 3628 

online commerce card, using the transaction number as an index to the appropriate 
data record, and processes the authorization request using the card's true customer 
account number. In this manner, the issuing institution can use its existing processing 
system to check account information, spending limits, and so forth. Once the 
authorization request is processed, the issuing institution once again exchanges the 
card's transaction number for the card's customer account number and sends an 
authorization reply back to the merchant under the transaction number. (See column 2 
lines 5-40 of Franklin et al). Franklin et al does explicitly not teach limited use 
properties of revalidated limited use credit card number are different from the limited 
use properties of the validated limited use credit card number this is taught by Masuda. 
Masuda disclose the credit card and/or the first system may have a limit amount 
column for recording a limit amount of money, and the first system may further comprise 
means for updating the limit amount of money recorded in the limit amount column as 
the credit card is used. Each of the methods may further comprise the step of 
determining whether the credit card can be used or not based on resultant data 
produced by comparison between the limit amount of money recorded in the limit 
amount column and an amount to money proposed to pay with the credit card. It would 
have been obvious to one of ordinary skill in the art at the time that invention was made 
to modify the teachings of Franklin et al to include Masuda in order for the limited use 
properties of revalidated limited use credit card number to be different from the limited 
use properties of the validated limited use credit card number. The benefit would have 
been to reactivate or update the credit card with a new value. 
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Conclusion 



4. The prior art of record and not relied upon is considered pertinent to 
Applicants disclosure. 

Walker (US 6,144,948 Patent ) teaches instant credit card marketing system for 
reservations for future services . 

Stanford (US Patent 6,375,084) teaches card charging system . 

Brody (US Patent 5,350,906) teaches currency transfer system and method 

using fixed limit cards. 

Tannenbaum (US Patent 5,326,960) teaches a apparatus and method for 
improved 

vending machine inventory maintenance. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Clement B Graham whose telephone number is 
703-305-1874. The examiner can normally be reached on 7am to 5pm. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Frantzy Ponvil can be reached on 703-305-9779. The fax phone numbers 
for the organization where this application or proceeding is assigned are 703-305-0040 
for regular communications and 703-305-0040 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. ZT^> 
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